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« The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

AM claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed^ln due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdraw^om issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1,313 and MPEP 1308. 

1. [3 This communication is responsive to amendment filed 22 October 2003 . 

2. (3 The allowed claim(s) is/are ^9. 

3. S The drawings filed on 06 December 2001 are accepted by the Examiner. 

4. (3 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) E3 All b) □ Some* c) □ None of the: 

1. Certified copies of the priority documents have been received. 
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3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

5. IZ] Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application) since a specific 

reference was included in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1 .78. 

(a) CD The translation of the foreign language provisional application has been received. 

6. O Acknowledgment is made of a claim for domestic priority under 35 U.S.C. §§ 120 and/or 121 since a specific reference was included 

in the first sentence of the specification or in an Application Data Sheet. 37 CFR 1.78. 
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EXAMINER'S AMENDMENT 



An examiner's amendment to the record appears below. Should the changes and/or additions be 
unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure 
consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee. 

The application has been amended as follows: 

Cancel claims 10-25 as being drawn to an nonelected invention. 

Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Scott R. Wilson whose telephone number is 703-308-6557. The examiner can normally be 
reached on M-F 8:30 - 4:30 Eastern. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Nathan Flynn can be reached on 703-308-6601 . The fax phone number for the organization where this 
application or proceeding is assigned is 703-308-7722. 

Any inquiry of a general nature or relating to the status of this application or proceeding should be 
directed to the receptionist whose telephone number is 703-308-1782. 
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Instead of giving a quantum computer algorithm for fact oring n directly, we give 
a quantum computer Algorithm for finding the order r of an element x in the multi- 
plicative group (mod n); that is, the least integer r such that z r = 1 (mod n). It is 
known that using randomization, factorization can ho reduced to finding the order of 
an element [Miller 1976]; we now briefly give this reduction. 

To find a fa<:tor of an odd number n, given a method for computing the order 
r of choose a random x (mod n), find its order r, and compute gcd{.W 2 — l.n). 
Here, gcd(a y b) is the greatest common divisor of a and Z>, Le., the largest integer that 
divides both a and b. The Euclidean algorithm [Knuth 1981] can be used to compute 
gcd(<?, b) in polynomial time. Since {x r -' i — l)(^ r//2 -f 1) — x r — 1 = 0 (mod n), the 
numbers gc<)(x r - 2 + 1. n) and gcd(» r/ ' 2 — 1, n) will be two factors of n. This proce<hire 
fails only if /* is odd, in which case r/2 is not integral, or if = — 1 (mod n), in 
which case the procedure yields the trivial factors 1 and n. Using this criterion, it 
can be shown that this procedure, when applied to a random x (mod n), yields a 
non-trivial factor of n with probability at least 1 — 1/2**" *, where A: is the numlx* of 
distinct odd prime factors of n. A brief sketch of the proof of this result follows. 

Suppose that n = Yli=iP? % ^ t ne prime factorization of n. Let r f - be the order 
of x (mod pf*). Then r Ls the least common multiple of all the rv. Consider the 
largest power of 2 dividing each r,-. The algorithm only fails if all of these powers of 
2 agree: if they are all 1, then r is odd and r/2 does not exist; if they are all equal 
and larger than l, then = — 1 (modp"*) for every i % so x r f 2 = — 1 (mod n). 
By the Chinese remainder theorem [Knuth 1 981, Hardy and Wright 1979, Theorem 
121], choosing an x (mod n) at random is the same as choosing for each ? a number 
x; (mod p^) at random , where j?= jv (mod The multiplicative group (modp 01 ) 
for any odd prime power p* is cyclic [Knuth 1981], so for the odd prime power p? % 
the probability is at most, 1/2 of choosing an X{ having a particular power of two as 
the largest divisor of its order r;. Thus each of these powers of 2 has at most a 50% 
probability of agreeing with the previous ones, so all k of t.hem agree with probability 
at most 1 /2 k ~ } . There is thus at least, a I — I /2*" 1 probability that the r. we choose is 
good. This argument shows the scheme will work as long as n is odd and not a prime 
power; finding a factor of even numbers and of prime powers can be done efficiently 
with classical methods. 

We now describe the algorithm for finding the order of x (mod n) on a quantum 
computer. This algorithm will use two quantum registers which hold integers repre- 
sented in binary. There will also be some amount of workspace. Tliis workspace gets 
reset 0 after each subroutine of our algorithm, so wc will not include it when we 
write down the state of our machine. 

Given x and n, to find the order of x, i.e., the least r such that x r ~ 1 (mod n), 
we do the following. First, we find q, the power of 2 with n 2 < q < 2n 2 . We will not 
include n> x y or q when we write down the stote of our machine, because we never 
change these values. In a quantum gate array we need not even keep these values in 
memory, as they can be built into the structure of the gate array. 

Next, we put the first, register in the uniform s\iperposition of states representing 
nunibers a (mod q). This leaves our machine in state 

This step is relatively easy, since all it entails is putting each bit in the first register 
into the superposition ^(|0) -f |1)). 



